Comment by Mesmoria

Maybe it's my ignorant paranoia - but entering my google password into a login box produced by an app i just downloaded makes me nervous.

I am (mostly) sure it was doing a legitimate OAuth - but how can I tell?